CWE-769 DEPRECATED: Uncontrolled File Descriptor Consumption
baseThis entry has been deprecated because it was a duplicate of CWE-774. All content has been transferred to CWE-774.
01
vulnerabilities (12)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-38396US | high7.8 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
Export anon_inode_make_secure_inode() t… | ||||
| CVE-2018-14622US | high7.5 | — | ||
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a c… | ||||
| CVE-2018-0358US | high7.5 | — | ||
A vulnerability in the file descriptor handling of Cisco TelePresence Video Communication Server (VCS) Expressway could allow an unauthenticated, remote attacker to cause a denial… | ||||
| CVE-2017-1000098US | high7.5 | — | ||
The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an… | ||||
| CVE-2017-8452US | high7.5 | — | ||
Kibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be cleaned up after certain requests and will accumulate over time until the process… | ||||
| CVE-2023-53117US | high7.1 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fs: prevent out-of-bounds array speculation when closing a file descriptor
Google-Bug-Id: 114199369 | ||||
| CVE-2025-39756US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
fs: Prevent file descriptor table allocations exceeding INT_MAX
When sysctl_nr_open is set to a very high valu… | ||||
| CVE-2023-53045US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: u_audio: don't let userspace block driver unbind
In the unbind callback for f_uac1 and f_uac2, a… | ||||
| CVE-2022-49767US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
9p/trans_fd: always use O_NONBLOCK read/write
syzbot is reporting hung task at p9_fd_close() [1], for p9_mux_p… | ||||
| CVE-2024-50031US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Stop the active perfmon before being destroyed
When running `kmscube` with one or more performance mo… | ||||
| CVE-2026-21716US | —OT elevated | — | ||
An incomplete fix for CVE-2024-36137 leaves `FileHandle.chmod()` and `FileHandle.chown()` in the promises API without the required permission checks, while their callback-based equ… | ||||
| CVE-2025-4001US | — | — | ||
A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examples/LOP/src/genRandom… | ||||
02
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan